Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File:                     NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier:          KHEqIQaxn7vZv6SqYuEjbyRnM7nWeD9a/HeDYiM1etg=
Subject key identifier:   6E:17:B4:B9:78:09:64:6D:E2:08:5B:CD:E1:55:CF:10:FF:D6:F0:D3
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer:       /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial:       0196C916D9682F58BD06280571248CE4349A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 10:00:39 +0000
Manifest this update:     Tue 13 May 2025 10:00:39 +0000
Manifest next update:     Wed 14 May 2025 10:00:39 +0000
Files and hashes:         1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
                          2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: 0ZA1+djxwGRqcHCUyf89bUaUJMLJsv0WElDV1LhegXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:d9:68:2f:58:bd:06:28:05:71:24:8c:e4:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
        Validity
            Not Before: May 13 10:00:39 2025 GMT
            Not After : May 14 10:00:39 2025 GMT
        Subject: CN=6e17b4b97809646de2085bcde155cf10ffd6f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:bd:90:86:0e:35:01:56:e0:11:b3:cb:be:
                    d6:2e:a3:07:c4:47:c7:03:05:6e:4a:62:b1:8d:ec:
                    48:3a:9d:5a:91:87:ed:e8:fe:9a:14:86:17:b7:11:
                    88:eb:29:57:23:a4:89:c3:99:24:d3:c4:15:a0:cd:
                    51:a2:cb:2e:70:de:14:53:7b:08:c6:42:82:de:18:
                    8e:da:5e:5c:35:99:c6:a7:76:6a:72:55:7c:26:fe:
                    fa:3e:08:17:2b:69:a8:bd:87:37:85:8c:6a:23:05:
                    95:48:e5:d5:12:cb:b6:fa:68:94:7d:8c:fe:80:bf:
                    70:d0:95:e7:31:51:36:b9:44:c1:b7:e9:d5:88:9e:
                    6f:01:d2:bb:6f:3a:32:fa:f2:eb:5a:0d:31:d4:d2:
                    67:43:11:a9:60:32:70:12:5b:79:f0:dc:7e:4d:93:
                    73:a0:6a:e2:4c:4a:1c:cc:94:ee:8b:36:24:72:80:
                    ce:0f:1d:8d:9a:0f:63:27:3c:4e:cc:84:46:1c:cc:
                    6b:26:13:c3:7d:4b:a9:39:31:f6:0b:77:ff:9a:d8:
                    6b:b9:ad:cb:61:21:ce:b2:82:2a:6c:29:d9:19:db:
                    3e:d7:9c:fe:75:36:9f:4f:3c:df:e0:eb:f2:6f:43:
                    93:84:79:09:98:0b:c3:17:64:15:20:16:65:73:4f:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:B4:B9:78:09:64:6D:E2:08:5B:CD:E1:55:CF:10:FF:D6:F0:D3
            X509v3 Authority Key Identifier:
                keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:26:65:22:65:64:25:32:b7:fd:e9:47:3c:19:77:a9:3e:
         2f:6d:1c:4b:9a:d9:3a:bc:15:54:ee:9d:cf:61:62:1a:57:0a:
         0f:2f:5e:bc:5b:77:cf:4e:e4:34:fb:fd:eb:36:f1:c4:68:64:
         9f:a3:b4:e7:88:c3:6e:18:0d:28:d7:c1:5a:b8:32:81:bb:ca:
         0a:2e:03:55:a1:63:85:5e:96:83:ef:25:cf:6a:e2:4b:e1:4e:
         4b:35:24:f3:a0:99:e5:22:1b:18:20:78:1d:63:be:5e:ee:45:
         31:85:e3:fb:a6:43:fd:4b:be:7a:d8:b6:8e:3f:a9:b1:55:a9:
         09:44:0f:42:03:3f:88:b0:ea:f0:43:d7:fb:4d:68:78:b1:ca:
         fc:c6:61:af:66:36:c0:60:26:2a:eb:e4:ff:36:30:07:6c:ff:
         f5:ce:16:ba:4e:86:42:57:c3:20:0b:bc:66:7e:73:6d:4f:77:
         39:a0:38:c7:aa:13:77:22:c1:bc:4e:11:9f:ff:50:0d:c5:a7:
         e9:85:b3:2f:ff:6a:e7:7b:df:a3:4c:48:39:b8:05:0e:38:1e:
         42:9b:11:e4:cf:40:61:a8:2d:3d:cd:f4:bc:95:c9:a1:04:77:
         77:3b:0b:9c:dc:bf:d2:4b:5e:4d:41:6a:5e:b8:22:97:1f:a3:
         d5:ad:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:55:13 2025 by rpki-client